Re: RNG in a Smart Card

Peter Gutmann (pgut001@cs.auckland.ac.nz)
Thu, 30 Jul 1998 12:01:27 (NZST)

• Next message: Bill Stewart: "Re: DSA alternative to RSA"
• Previous message: David Honig: "Re: Abstract Algorithms"
• In reply to: Ben Laurie: "Re: Abstract Algorithms"
• Next in thread: mok-kong shen: "Re: RNG in a Smart Card"
• Reply: mok-kong shen: "Re: RNG in a Smart Card"
• Reply: Ray Arachelian: "Re: RNG in a Smart Card"

I've just been informed of another example of a very questionable RNG. Have a
look at https://spk-ihb.izb-hb.de/SPK_Forchheim/index.html, the first thing
you'll be asked to do is move your mouse a bit to generate a 128-bit session
key for use in Internet banking. Apparently moving your mouse in a 10cm
straight line is enough to generate 128 bits of entropy. Java types may want
to look at this in a bit more detail.
 
Peter.
 

• Next message: Bill Stewart: "Re: DSA alternative to RSA"
• Previous message: David Honig: "Re: Abstract Algorithms"
• In reply to: Ben Laurie: "Re: Abstract Algorithms"
• Next in thread: mok-kong shen: "Re: RNG in a Smart Card"
• Reply: mok-kong shen: "Re: RNG in a Smart Card"
• Reply: Ray Arachelian: "Re: RNG in a Smart Card"